Overview
Explore
Expertise
Ecosystem
What's popular
AI for Security vs Security for AI with Palo Alto Networks
Join WWT and Palo Alto Networks for an insightful discussion about how AI is transforming organizations and reshaping today's cybersecurity landscape. Learn how Palo Alto Networks comprehensive platform approach combined with WWT's ARMOR framework and ATC validation capabilities, helps customers secure every aspect of AI usage from development to deployment and beyond.
ATC+
Palo Alto Networks Next-Generation Firewall (NGFW) Intermediate
Once you've mastered the basics of Palo Alto's NGFW with the fundamentals Learning Path, it's time to continue your education with the intermediate LP. This Learning Path will teach you topics that help get further use out of your NGFW such as SSL Decryption. Once you've configured SSL Decryption, the NGFW will be able to defend your network in new ways, including URL Filtering, Credential Detection, DGA Detection, DNS Sinkholes, and more!
Palo Alto NGFW Foundations Version 11 Lab
The Palo Alto NGFW Foundations Lab is a capability of the Advanced Technology Center (ATC) designed to provide an environment to gain hands-on experience with the fundamental features of Palo Alto's solution. The environment that supports the lab is completely virtual, removing any hardware dependencies associated with physical infrastructure.
PAN-OS and EDLs - Everything You Wanted to Know about External Dynamic Lists
External Dynamic Lists (EDLs) in Palo Alto Firewalls dynamically integrate IPs, URLs, and domains into security policies, reducing change requests. They empower SOCs to manage threats without firewall changes. Despite limitations, EDLs enhance security by automating updates and supporting authentication. Implementing EDLs optimizes security posture and streamlines threat management.
Introduction to XQL: Writing Your First Query
Learning a new programming or query language can be daunting, but if you've used the boolean options in a web search engine before, you can master XQL queries in no time. Like with web searches, we start with a hypothesis of our search, add filters to limit our results, and then validate the results that are returned against our hypothesis.
What's new
From Alerts to Outcomes: Modernizing the SOC with WWT and Palo Alto Networks Cortex XDR
Join World Wide Technology (WWT) and Palo Alto Networks for an immersive Partner Spotlight virtual event dedicated to advancing Security Operations and SOC excellence. This exclusive session digs into the Palo Alto Networks Cortex product portfolio, with a special emphasis on Cortex XDR. Experts from both organizations will explore how Cortex XDR empowers security teams to detect, investigate, and respond to threats across endpoints, networks, and cloud environments. Attendees will gain actionable insights into integrating Cortex solutions for holistic threat management and operational agility within modern SOCs.
Better AI, Not Less AI: The Case for Explainability in Security Operations
As organizations struggle with alert fatigue, traditional AI security tools fall short by operating as black boxes that offer verdicts without reasoning. Explainable AI (XAI) addresses this by showing analysts why decisions are made across triage, investigation, and response. The result is faster workflows, smarter detection and analysts who build real threat intuition.
ATC+
Palo Alto Networks Next-Generation Firewall (NGFW) Intermediate
Once you've mastered the basics of Palo Alto's NGFW with the fundamentals Learning Path, it's time to continue your education with the intermediate LP. This Learning Path will teach you topics that help get further use out of your NGFW such as SSL Decryption. Once you've configured SSL Decryption, the NGFW will be able to defend your network in new ways, including URL Filtering, Credential Detection, DGA Detection, DNS Sinkholes, and more!
Prisma AIRS Series - Part 1: Discovery
AI is spreading faster than most organizations can track it, across apps, APIs, and teams, often without clear visibility or control. This article explores why traditional discovery falls short and how Prisma AIRS approaches AI security as a connected system, starting with Discovery. By building a unified, contextual view of models, data, and interactions; including shadow AI, organizations can finally understand where risk exists and where control is needed. Next, we turn to Assessment; how to test what you've found.
Partner POV | Palo Alto Networks Prisma Browser
Browse Bravely with Palo Alto Networks
ATC+
Palo Alto Cortex XDR Proving Ground Lab
WWT's ATC Palo Alto Cortex XDR Proving Ground Lab provides a consolidated solution built around Cortex XDR, the Palo Alto firewall, Windows endpoints and Windows servers to demonstrate how the Cortex XDR Agent protects against threats. The goal of Cortex XDR is to increase the operational efficiency of the security operations center. Cortex XDR accomplishes this by reducing alerts by combining similar events, stitching together logs from different sources and preventing as many threats as possible early in the attack cycle. Cortex XDR goes beyond the traditional EDR approach of using only endpoint data to identify and respond to threats by applying machine learning across all your enterprise, network, cloud and endpoint data. This approach enables you to quickly find and stop targeted attacks, insider abuse and remediate compromised endpoints. Cortex XDR combines functionality from Endpoint Protection, Endpoint Detection and Response, Network Traffic Analysis and User Behavior Analytics into a single console. This lab consists of servers running common applications that include Palo Alto Cortex XDR, Palo Alto Cortex XSOAR, Palo Alto VM-Series firewall, Active Directory, Windows IIS and SQL server, and several Windows 11 workstations. You will access the environment using a Windows-based jump host from which you can browse web consoles and open RDP/SSH sessions.
SSE and SASE Market Scan Workshop
Selecting the right Secure Access Service Edge (SASE) or Security Services Edge (SSE) solution is complex. With a crowded vendor landscape and evolving business requirements, making a confident, informed decision can feel overwhelming. WWT's Market Scan approach cuts through the noise, delivering objective, research-backed insights that align technology to your business priorities and accelerate your path to the right solution.
Nine Days to Exploitation. Two Weeks to Bypass. How Dataminr and Cortex Break the ToolShell Cycle.
Microsoft patched the SharePoint ToolShell vulnerability chain in July 2025. Within nine days it was under active exploitation. Within two weeks, the patches had been bypassed. Eight months later, a third variant was confirmed in the wild. Dataminr flagged the threat before the first CVE was published, giving customers weeks of early visibility that most organizations never had. This post walks through how the attack works, what it means for each team in your organization, and how Dataminr's early warning, combined with Cortex XSOAR, gives the SOC the visibility and prioritization it needs to stay ahead of a threat that won't stay fixed.
Securing Intelligent Transportation Systems: Applying Zero Trust to IoT Infrastructure
Modern highways run on thousands of connected devices—cameras, sensors, and toll systems—creating massive IoT attack surfaces. This article explores how transportation operators can apply Zero Trust principles using platforms like Palo Alto Networks to gain visibility, enforce segmentation, and protect critical infrastructure without disrupting operations.
Palo Alto NGFW Crafting Basic Security Policies Lab
This lab is a part of a larger collection of mini challenges designed to provide an environment to gain hands-on experience with the fundamental features of Palo Alto's NGFW solution.
World Wide Technology Awarded the Palo Alto Networks 2025 North America Cortex Partner of the Year
WWT recognized for driving measurable security outcomes through Cortex platform expertise
Partner POV | Think You Have Visibility? Think Again.
Traditional SIEMs struggle with visibility, leaving gaps for attackers. Cortex XSIAM leverages rich telemetry and data stitching to provide comprehensive threat detection and response. By unifying endpoint, network, and cloud data, it reduces alert fatigue and enhances security operations, enabling proactive defense against sophisticated threats. Discover transformative security with Cortex.
Partner POV | Securing Every Identity in the Age of AI
Identity has become the primary attack vector in modern enterprises, with machine identities outnumbering human ones. CyberArk's integration with Palo Alto Networks elevates identity security to a core platform, offering continuous, dynamic protection against identity-based breaches. This partnership empowers organizations to innovate securely in the AI-driven era.
Palo Alto NGFW Foundations Version 10 Lab
Palo Alto v10 is end of life. Please take a look at the Palo Alto v11 Foundations Lab.
The Palo Alto NGFW Foundations Lab is a capability of the Advanced Technology Center (ATC) designed to provide an environment to gain hands-on experience with the fundamental features of Palo Alto's solution. The environment that supports the lab is completely virtual, removing any hardware dependencies associated with physical infrastructure.
Palo Alto NGFW Foundations Version 11 Lab
The Palo Alto NGFW Foundations Lab is a capability of the Advanced Technology Center (ATC) designed to provide an environment to gain hands-on experience with the fundamental features of Palo Alto's solution. The environment that supports the lab is completely virtual, removing any hardware dependencies associated with physical infrastructure.
ATC+
Palo Alto NGFW Intermediate Version 10 Lab
Palo Alto v10 is end of life. Please take a look at the Palo Alto v11 Foundations Lab.
The Palo Alto NGFW Intermediate Lab is a hand-on virtual environment where you'll be able to complete the exercises you see in the Intermediate learning path as well as several new practicals. The Intermediate lab focuses on tasks like SSL Decryption, URL Filtering, and DNS Tunneling. Just like the Foundations lab, the Intermediate lab is built upon the same infrastructure. While there is a guide that you can follow along with, you can also explore the environment and test any configuration you'd like.
Palo Alto Networks Triple Threat
A coordinated ransomware assault is unfolding inside Tricorsa's environment, striking users, AI systems, and web services at once. SAVE deploys your team to unravel each attack chain, trace the adversary's movements, and contain the threat before it spreads further. Identify every malicious action, stop the ongoing intrusion, and restore stability across the enterprise.
How to Optimize Your End-User Computing Environment to Escape the AI Price Increases
Escaping AI‑driven endpoint price increases comes down to smarter, data‑driven decisions across the endpoint estate. Using persona analysis, DEX insights and targeted optimizations, organizations can achieve meaningful gains today while extending device lifecycles and reducing near‑term spend.
The Journey of Cortex XSOAR Playbook: Designing Your First Playbook
Transform your manual firewall upgrade process into a streamlined, automated workflow with Cortex XSOAR. This article guides you through designing a robust playbook for upgrading High Availability firewall pairs, emphasizing architectural decisions, governance integration and validation patterns. Discover how automation reduces errors, enhances efficiency and satisfies compliance requirements.
AI for Security vs Security for AI with Palo Alto Networks
Join WWT and Palo Alto Networks for an insightful discussion about how AI is transforming organizations and reshaping today's cybersecurity landscape. Learn how Palo Alto Networks comprehensive platform approach combined with WWT's ARMOR framework and ATC validation capabilities, helps customers secure every aspect of AI usage from development to deployment and beyond.